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LICENSE KANAGEHENT SYSTEM AND METHOD 



BACKSROmro 
Field of -the Inven-tien 

The present Invention generally relates to 
5 systems for atanaging licenses of products such as 
computer software, video games, CD-ROM information, 
movies and other video products, music and other audio 
products, multimedia products, £md other systems for 
up-to-date recording of actual usage of such a 
10 licensed product to enable efficient billing therefor. 

Description of Related A^, 

Licenses for information products such as 

computer software, music, video products and the like 

usually provide licensees with limited rights. Th 
15 licenses may restrict sites of use, duration of use, 

or number of concurrent: uses of the products. The 

licenses also may limit the use of the products 

depending on currentness of licensee's payments. 

However, enforcing the conditions of the licenses is 
20 difficult, because, in general, the licensed products 

may be easily copied or "pirated" and used without the 

licensor's ]cnowledge. 

Compliance with limited license rights has been 

encouraged with copy protection. Known methods of 
25 computer software copy protection include putting a 
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physical h Ic r mark n . th disk tt containing a 
product, or placing data on the diskette in a location 
where no data is expected. A disk with an illegally 
copied software product usually would not contain the 
5 marks. At the beginning of its operation, a copy- 
protected, but illegally copied software product would 
search its own diskette for the marks. Upon failing 
to detect the marks, the software would abort from its 
normal procedures. 

10 Most software products sold today do not have 

such copy protection, partly because copy protection 
renders legitimate duplication of copy protect d 
software difficult, but not impossible. Copy 
protection frustrates the making of legitimate copies, 

15 while not eliminating unauthorized copying. Mamy 
software publishers have experienced higher sales by 
eliminating copy protection schemes. 

Another method for enforcing limited licensing 
rights of computer software is described in U.S. 

20 patent No. 4,932,054 to Chou. Chou describes a "coded 
filter" haurdware device which is plugged into a port 
of a computer. The "coded filter" outputs an 
authorization control code when a predetermin d 
control code is sent to it. The licensed softwar 

25 functions properly only if the "coded filter" 
transmits the correct authorization control code t 
the software. 

While devices such as described by Chou have 
existed for several years, they have not been w 11 

30 accepted by the market. Since the device is attached 
to the outside of a computer, it can easily be lost or 
stolen, preventing the use of licensed software. In 
addition, if a licensee purchased a number of softwar 
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products, each of which used Ch a*8 pr t ction scheme, 
th licens e would collect a stack f "coded filters. 

Hershey, in U.S. patent No. 4,924,378, describes 
a method for limiting the number of concurrent uses of 
5 a licensed software product. Each workstation of a 
network has a license storage area in its local 
memory. License Management System (LMS) daemons are 
provided in the network in a nimiber corresponding to 
the permissible number of concurrent uses of th 

10 software product. To use the software, a work station 
stores a daemon in its license storage area* If all 
daemons are in use, no further work stations may use 
the softw£u:e. 

Robert et al., in U.S. patent No. 4,937,863, 

X5 describe a similar invention. This invention includes 
a license management facility which accesses a 
database of license information related to licensed 
computer software programs. When a user attempts to 
use a licensed progrem, the license managem nt 

20 facility first checks the database. Access to the 
licensed product is prevented if licensing conditions 
related to the product are not satisfied (e.g«, 
expiration of licensing dates, etc). 

miile the Robert et al. and Hershey patents show 

25 effective techniques for controlling licensed computer 
software, each also reveals components that cannot be 
easily managed by an average user. A .system manager, 
or someone with special access privileges to the 
internals of a machine, must install the licens d 

30 software. This hinders the distribution of the 
software. 

Licensable products other than computer software 
have not generally been copy^protected. For example. 



BNSOCXtD: <WO_9301560A1J_> 



wo 93/01550 



vide tapes can be easily copied by anyon with two 
VCR machines, and audio tap s and music CDs can be 
easily copied to tape. Computer CD-ROMs can be copied 
to magnetic disk; however , their large inf ormati n 
5 storage capacity relative to that of magnetic disks 
msJces this a very expens ive propos it ion • Th 
introduction of digital audio tape is being delay d, 
because some view its ability to easily produce v ry 
high quality copies as a threat to music royalties. 
10 Hellmem, in U.S. patent No. 4,658,093, describes 

meatns to bill by usage. This is accomplished via 
communication of an encrypted authorization code from 
a licensor to a base unit at the licensee's site. The 
encrypted authorization code contains inf ormati n 
15 related to an identification of the base unit, a 
number of uses rec[uested , and a random or non* 
repeating number; however, implementation of Hellmem's 
scheme rec[uires a "base imit**, such as a computer, 
video game unit, record player, video recorder, r 
20 video disk player, with a unique identification 
number. The requirement is difficult to satisfy, 
because, at the present, only a fraction of such 
systems on the market have an internally readabl 
serial number for identification. Zn addition, 
25 vendors of these systems provide no guarantees for the 
tiniqueness of any given device's serial number. 
Furthermore, an internal serial number can change when 
hardwsure maintenance is performed on the devic • 
Also, Bellman's approach requires that an identical 
30 copy of each software product be stored at th 
authorization site. These copies sure iised in the 
generation of unique keys. The iinstated assxmption 
that all copies of a specific version of a softwar 
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prcxluct ar id ntical is unrealistic. Minor bug fixes 
to 6 ftvar are oft n made vith ut generating a new 
version of the product. Also, some software products, 
such as those which run on Macintosh computers, ar 
5 seif-Bodifying. 

While Hellman's invention counts each use of the 
software, it does not monitor the dtiration of us . 
Thus, Bellman's system would not be able to bill for 
extensive use of licensed software if the softwar 
10 were continuously operated. Finally, ^ile Hellman 
suggests the inclusion of an automated communication 
system as part of his invention, he does not disclose 
how this communication system could be implement d. 
Instead, he mentions non-automated use of telephone 
15 and mail. In summary, Hellman *s patent is an 
interesting discussion of cryptographic techniques, 
but it does not provide a practical, realr-world 
implementation of those techniq[ues. 

Shear, in U.S. Patent No. 4,977,594, describes a 
20 system and method to meter usage of distributed 
databases such as CD-ROH systems. The method 
describes a hardware module which must be part of th 
computer used to access the distributed databas • 
This module retains records of the information view d. 
25 Once the module storage is filled, the module must be 
removed and delivered to someone who will charge for 
the usage recorded therein and set the module back to 
zero usage. Like Hellman "s method, this method 
requires a hardware module which must be incorporated 
30 within the computer so the system can control us r 
access. No database publisher will be able to us 
this method until there are a very large number of 
units containing such modules. Hardware manufacturers 
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will be hesitant to include th modul in the design 
f their comput rs until there is sufficient demand 
from ciistomers or publishers for this system. Th 
method and apparatus according to the present 
5 invention can be implemented entirely in software and 
hence does not require special, dedicated computer 
subsystems • 

SUMMARY OF THE INVENTION 
It is an object of the present invention to 
10 provide a license management system and method %Aiich 
can ensure that a licensed product is used only n 
machines under which it is licensed. 

It is another object of the present invention t 
provide a license management system and method %rtiich 
15 may terminate access to a licensed product once its 
license has expired. 

It is yet another object of the present invention 
to provide a license management system and method 
which may terminate access to a licensed product when 
20 payment for a license is overdue. 

It is a further object of the present invention to 
provide a license management system and method which 
cam limit the number of concurrent uses of a licensed 
product. 

25 It is yet another object of the present invention 

to provide a license management system and method 
which can bill licensees for the diiration of actual 
usage of a licensed product. 

The present invention provides an advantageous 

30 feature of quickly and effectively implementing 
license agreements between a licensor and licensee. 
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Th pr s nt inv nti n pr vldes an th r 
advant:ag ous f atur £ allowing logic us d t c n^rol 
licenses to be easily changed. 

The present invention provides yet an ther 
5 advantageous feattire of detecting, at the licensor's 
site, many types of attempts to alter the lie ns 
management system. 

. The present invention provides a further 
advantageous feature of permitting anyone with ut 
10 special access privileges to install a licensed 
product. 

In the present invention, a licensed product 
generates request "datagrams,*" messages transmitted 
over a communications network. The request datagrams 

15 sure sent to the licensor's site. At the licensor's 
site the datagram is compared to information stored in 
a license database. After the comparison, a r ply 
datagram is sent to the licensee. Upon receiving th 
reply datagram, the licensed product reacts in 

20 accordance with the instructions therevithin. For 
example if a reply datagram contained a "denial," th 
licensed product would display an appropriate messag 
to the user and then suspend further execution of its 
programs. 

25 In the present invention, the licensed product 

is implemented on a network node attached to a 
communications network that includes the licens r. 
The network node may be a computer, a CO-ROM player, 
a tele-computer or other multimedia machine, or any 

30 other appropriate device. The node may also be an 
intelligent type of consumer electronic device us d 
for presenting information, such as an intelligent 
television, VCR, videodisk player, music CD player. 
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audi tape player, t lephone or otlier similar d vice. 
Further, th communications n tv rk may be any two** 
vay network such as a computer network, ^eleph ne 
network, a cellular telephone network or other 
5 wireless network, a two-way cable TV network, or any 
other equivalent system. 

Should the user detach the node from the network, 
the licensed product will fail to receive reply 
datagrams. Upon several failures to receive reply 
10 datagrams, the licensed product will generate its own 
denial. 

After a request datagram has been sent out, a 
user may be permitted to use the licensed product f r 
a limited duration. This feature may be necessary 
15 because of the delays in network commiinications. When 
networks are sufficiently fast, use of a licensed 
product can be postponed until the reply datagram is 
received . 

In the preferred embodiment of the present 
20 invention, licensees' network addresses are used to 
identify the licensees. Other embodiments may use a 
licensed product serial number or hardware serial 
niambers for the identification. 

A licensed product as in the present invention 
25 generates a request datagram after each period of 
product use* The number of request datagrams received 
by the licensor can be used to bill the licensee. For 
example, if datagrams are sent after every hour of 
product use, the licensee will be billed for the 
30 amount equal to the number of request datagrams 
received by the licensor multiplied by the hourly 
rate. 
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The embodlnents £ th pr sent inv ntion »ay 
inc rporate a guexy systea at a licensor *s sit £ r 
reporting on problem datagrass. This would allow th 
licensors to take appropriate actions in accordanc 
with problens associated with each datagram. 

BRTEF DESCRIPTION OP THB PRAWTWCS 
These and other objects and advantages of this 
invention will become more apparent and more readily 
appreciated from the following detailed descripti n 
of the presently preferred exemplary embodiment of th 
invention, taken in conjunction with the accompanying 
drawings, of which: 

FIGURE 1 is a general block diagram of th 
preferred exemplary embodiment of the pr sent 
invention; 

FIGDRB 2 shows representative diagrams of th 
contents and formats of data at licensee's sit , 
contained in datagrams, and at licensor's site; 

FIGURE 3 illustrates a sequence of representative 
operations executed at the licensee's site and at the 
licensor's site, together with required inputs for th 
execution of the operations and with outputs produc d 
therefrom; 

FIGURE 4 illustrates a sequence of representative 
operations to send a request datagram, together with 
required inputs for the execution of -the operations 
and with outputs produced therefrom; 

FIGURE 5 illustrates a sequence of representative 
operations when a reply datagram is overdue, togeth r 
with required inputs for the execution of the 
operations and with outputs produced therefrom; 
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FIGURE 6 shows a sequence of represen^ativ 
perations t. proc ss a reply datagram, t: gether with 
required input:8 for tiie execution of the operations 
and with outputs produced therefrom; 
5 FIGURE 7 shows a sequence of representative 

operations to generate an authorization code, together 
with required inputs for the execution of th 
operations and with outputs produced therefrom; and 
FIGURE 8 shows a sequence of representative 
10 operations to send a reply datagram, together with 
required inputs for the execution of the operations 
and with outputs produced therefrom. 

pi^^rr.vp DESCRIPTION OF THE 
PRESENTLY PREFERRED EXEMPLARY EMBODIMENT 

15 As shown in FIGURE 1, a licensed product 1 is 

located at a licensee's site. Product 1 may includ 
a data portion IB and a functional portion lA such as 
computer software product or any other k ind of 
information product used to control use of data 

20 portion IB. If data portion IB is CD-ROM databas 
information, functional portion lA should enable th 
licensee to search indexes and display text. If data 
portion IB is video information, fiinctional portion lA 
should control the display of the video information. 

25 For audio information, functional portion lA should 
play the audio information. If data portion IB is an 
electronic book, functional portion lA should display 
and turn pages. The above examples show some of the 
ways fxinctional portion lA can control data port! n 

30 IB; however, they are hardly exhaustive. 

By including in product 1 both inf ozrmation and 
software ^ich controls the information, product 1 is 
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an ex cutabl product. J<on*softvare inforaiati n in 
product 1 is pr f erably nczypt d s that it cannot 
be easily extracted , from the product. 

License check monitor 2 sends license datagrams 
5 3 to the licensor and also receives license datagrams 
3 from the licensor* License check monitor 2 als 
prevents further use of product 1 when a datagram 3 
containing a ''denial** message is received. 

License datagreuns 3 are messages that describe 

10 information related to the use of licensed product 1. 
Datagrams 3 are sent over a communications netw rk 
between the licensee and licensor. Initially, th 
licensee sends a reqniest datagram 3 over the network 
to the licensor* The licensor then returns a r ply 

15 datagram containing either an approval or denial. It 
is also possible to implement the present invention by 
having the licensor transmit a reply datagram only f r 
approvals. 

At the licensor's site, license control system 4 
20 makes licensing decisions by comparing requ st 
datagram 3 with license records 5. After th 
comparison, control system 4 stores information 
related to request datagram 3 into history of lie ns 
datagram record 6. It is noted that request datagrams 
25 3 are periodically sent while product 1 is in use. 
Thus, the history of license datagrams in record 6 
provides means for measxiring the * duration of us of 
product 1 • 

Representations of data and records stored at th 
30 licensee's site, contained in datagrams, and stored at 
the licensor's site are illustrated in FIGURE 2. At 
the licensee's site, network service 7, which handl s 
delivery and transmission of datagrams 3, supplies 
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n tv rk address 8. It is by this address that lie nse 
contr 1 system 4 id ntifi s a location of use of 
product !• 

Licensed product record 9 is contained within 
5 monitor 2. Within the license product record 9 is an 
identification record 10, «iich contains the following 
two items: licensor's netvork address 11, and product 
model number 12 that identifies product l. When a 
licensor has only one product, or uses different 

10 licensor network addresses 11 for each product, 
product model number 12 may not be needed. 

Datagram sent record 13 stores information about 
the last sent datagram 3. It includes a datagram 
number 14 , which uniquely identifies the last 

15 transmitted datagram 3, and the date and time 15 when 
the last datagram 3 was sent from the licensee's site* 
Licensed product record 9 also contains control 
parameters record 16, %rtiich is used for controlling 
the timing of key events in the communication of 

20 license check monitor 2 with license control system 
4. Send interval 17 specifies a time interval between 
each transmission of a new datagram 3 from th 
licensee to the licensor. 

Wait interval 18 is the length of time that 

25 monitor 2 waits to receive a reply datagram 3 befor 
resending the same request datagram 3« The duration 
of this interval depends on the speed of the 
communications network being used to deliver datagrams 
3. 

30 Disconnect allowed interval 19 is the duration 

of time that monitor 2 allows product 1 to be us d 
without a reply datagram 3 from the licensor. The 
duration of this interval depends on the reliability 
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of th commiinications n tv rk. The interval aust be 
long n ugh to take int c nsideration network 
do%mtime. For example, suppose a message was s nt 
from the licensor and the network went down just 
5 afterwards. Disconnect allowed interval 19 should be 
long enough to allov the network to resume its normal 
operation and successfully deliver datagrams 3 from 
the licensor; otherwise, the licensee would be forced 
to stop using product 1 until the network was 
10 operational. 

License datagram 3 contains header 20. Header 

20 is used during execution of low level communication 
protocols within the network. Source network address 

21 is the network address from where datagram 3 is 
15 sent. Destination network address 22 is the network 

address to where datagram 3 is sent. Additional data 
may be included in header 20 if reqpiired by low 1 vel 
protocols used in delivering datagrams 3. 

Data 23, a part of datagram 3, conveys a message, 

20 and contains a number of fields. Product model number 
24 and datagram number 25 identify product 1 and 
datagram 3, respectively. It is noted that 
retransmitted datagrams have an . identical datagram 
nximber. Duplicate datagrams must be identified at a 

25 licensor's site so that they do not all contribut in 
billing a licensee. 

Each datagram ntimber 25 is unic[ue for each 
request datagram 3 transmitted from the licensee, 
except for retransmitted datagrams. This allows a 

30 reply datagram 3 received by a licensee to be verified 
as an actual reply to a request datagram 3 from that 
licensee, as explained below. 
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Number of processes running 26 is th nxiiaber f 
concurrent us s f product 1 at th tim datagram 3 
is sent. Authorization code 27 is used on r ply 
datagreuns 3 to indicate an approval or a denial. 
5 Message text 28 contains a message which will be 
displayed to the user upon a denial • 

License database 29 at the licensor's site holds 
records of information about customers, licenses, and 
license usage. The types of information within 

10 license database 29 of the present embodiment ar 
shown in FIGDRE 2. However, a specific licens 
management system may require its license databas t 
hold types of information other than those in FIGURE 
2. For example, licensee nsune and address may be 

15 incorporated as a part of a license database 29. 

License record 5 contains information on 
licenses. Licensee network address 30 identifies a 
precise network node which is licensed to use product 
1. If request datagrams are received which do n t 

20 originate from known licensee network addresses 30, 
reply datagrams containing denial messages are 
transmitted. Product model nximber 31 is the mod 1 
number of a licensed product. Termination date 32 is 
the expiration date of a license. When the license f 

25 a product is issued for an unlimited duration, 
termination date 32 should reflect a date very far 
into the future, relative to the licensing date. 

The present embodiment allows licenses to be paid 
for in a lease-like or rental fashion. If a licens 

30 were to rent or lease product 1, paid through date 33 
would reflect the date through which the licensee has 
paid for using the product. Grace period 34 is th 
time interval for which the licensee is allowed to be 
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delinqpi nt before services are disconnect d. Grac 
period 34 would r £1 ct a very large time interval if 
tfae license is not of a lease-like or rental type. 
When the license provides for a limit on the number of 
5 concurrent uses of a product l, number of process s 
licensed 35 contains the limitiing number. When th 
license does not provide for such a limit, number of 
processes 35 should be a very large number. 

History of license datagrams 6 is an archiv of 
10 datagrams 3 received from the licensee. 

FIGDRE 3 illustrates operations executed at th 
licensee's site and at the licensor's site. An 
overview of the processing at ^e licensee's sit is 
described by steps 101.0 to lOS.O, and an overvi w of 
15 the processing at the licensor's site is described by 
steps 107.0 to 110.0. 

At the licensee's site, at step 101.0, product 1 
invokes monitor 2. This is accomplished by first 
establishing monitor 2 as a handler for a timer 
20 expiration interrupt signal and for received datagrams 
3. Next, a timer is set with a very short tim t 
cause an initial call to monitor 2. At step 102.0, 
monitor 2 computes a time 36 since the last datagram 
was sent by determining the difference between the 
25 current date and sent time and date and time 15 that 
a datagram vas last sent from the licensee's site. 
When product 1 commences execution, datagreun sent dat 
and time 15 is set to "null.« Thus, time since send 
36 is very large at the beginning of the monit r's 
30 execution. At step 103.0, time since send 36 is 
compared to send interval 17. If time since send 36 
is greater than send interval 17, then a request 
datagram is transmitted, per the steps described in 
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FIGURE 4. Step 104.0 first checks if a reply to the 
last datagram has arrived and if wait int rval 18 has 
expired. If a reply has not arrived and the vait 
interval has expired, steps 104.1-104.3 (FIGURE 5) ar 
5 executed. Step 105.0 processes authorization code 27 
in a reply when the reply is received, in accordanc 
with steps 105.1 to 105.5 (FIGURE 6) . At step 106.0, 
product 1 resumes normal execution of its programs 
until the next interrupt signal is generated. 
10 At the licensor's site, license control system 4 

receives and processes datagram 3, in accordance with 
steps 107.0 to 110.0. Step 107.0 receives regu st 
datagram 3. Step 108.0 generates authorization code 
27, per steps 108.1 to 108.8 (FIGURE 7). Step 109.0 
15 creates reply datagreua 3 and transmits the datagram to 
the licensee via steps 109.1 to 109.5 (FIGURE 8). 

FIGURE 4 shows the procedxure which monitor 2 
follows for sending recjuest datagram 3 to th 
licensor. Step 103.1 sets source network address 21 
20 in datagreua 3 to the network address 8 of th 
licensee's location on the network. Step 103.2 sets 
destination network address 22 to licensor's network 
address 11. Step 103.3 encrypts product model number 
12 for datagram 3. Step 103.4 assigns a unigue number 
25 to datagram 3, encrypts the number, and stores it as 
datagram nxamber 14. This number is altered when an 
entirely new datagram 3 is sent. Datagrams which are 
retransmitted have the same datagram number 25 as th 
original. As already explained, this allows licens 
30 control system 4 to identify duplicate datagrams. 

Step 103.5 counts the number of processes using 
product 1, cxirrently running, encrypts the cotmt, and 
stores the encryption as the nximber of processes 
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running 26. In th UNIX perating systea, this 
procedur could be perforned using th c suaand "ps" t 
obtain a list of current processes, the cosmand "gr p" 
to extract the processes of product 1, and "vc* t 
count "the number of processes. Step 103.6 sets 
authorization code 27 to niunber 255 and encrypts th 
nunber. 

Niunber 255 indicates that datagram 3 is a rec[uest 
for aut^liorization. Such an indication is need d t 
guard the present system against the following st ps 
for circimventing the present invention: intercepting 
outgoing datagrams; and inputting the intercept d 
datagrams to monitor 2 • 

Step 103.7 stores the current date and tim as 
sent date & time 15. This date is needed to comput 
when to send the next datagram 3. Step 103.8 assigns 
a value to send interval 17, which sets an alarm f r 
invoicing monitor 2 to send the next datagram 3. St p 
103.9 sends datagram 3. 

In the present embodiment a datagram is 
transmitted via a connectionless datagram servic • 
Methods for transmission are well documented for some 
networking systems. For excuaple, TCP/IP (Transport 
Control Protocol/Internet Protocol) includes a c n-* 
nectionless protocol called UDP (User Datagram 
Protocol) • A method for sending a datagram using UDP 
protocol from a SUN Microsystem computer is documented 
in a SDN manual titled. Network Proaramminrr Gni^^^ in 
section 9 titled "Transport Level interface 
Pr ogranming . ** 

Step 103.10 sets another alarm using wait 
interval 18 for retransmitting datagram 3, if no r ply 
datagraun has been received. The alarm causes monitor 
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2 to be invoked f r checking vh ther a r ply datagram 

3 has be n r ceived. Monitor 2 will transmit a 
duplicate of the previously transmitted datagram, if 
no reply has been received. After the execution of 

5 step 103.10, "Send License Datagram" procedure returns 
system control to step 104.0 in FIGURE 3. 

FIGURE 5 shows the operation of the "Reply 
Datagrsun is Overdue" procedure. Step 104.1 compares 
time since the last datagram was sent 36 to disconnect 
10 allowed interval 19, which, as described above, is th 
interval that product 1 is allowed to operate even if 
a reply is overdue. If time since send 36 is smaller 
than disconnect allowed interval 19, datagram 3 is 
retransmitted via executing step 103.9 in FIGURE 4. 
15 step 104.2 "disconnects" product 1 from further 
service, if time since send 36 is greater than 
disconnect allowed interval 19. 

Step 104.2 comprises a seqpience of sub-steps 
104.2. 1-104 .2. 3. Step 104.2.1 assigns number 5 to 
20 authorization code 27 in the current datagram being 
processed. Value 5 is interpreted by monitor 2 as a 
denial. Step 104.2.2 sets message text 28 to th 
following: "A reply from licensor to numerous 
authorization requests was never received. This 
25 product must be coimected to a communications network 
in order to function." Step 104.2.3 transfers system 
control to step 105.3 in FIGURE 6. Step 105.3 
processes the current denial datagram 3 as if it were 
just received. 

30 Through the execution of steps 104.1-104.3, the 

present system permits the use of product 1 for a 
prescribed period of time . After the prescribed 
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period f time has laps d, the present system 
g n rates a denial. 

FIGURE 6 illustrates the steps which monit r 2 
follows in processing a reply datagram 3. Step 105.1 
5 decrypts all encrypted data in the received datagram. 
Step 105.2 compares datagram ntimber 25 with datagram 
nxamber 14 associated with the last datagram. If 
datagram number 25 is not equal to datagreun niimber 14, 
step 105.2 ignores the current datagram and transfers 
10 procedural control to step 103.9 (FIGURE 4) in order 
to resend the last transmitted datagram • After 
disconnect allowed intezrval 19 elapses , monitor 2 
generates a denial. 

In essence, step 105.2 guards against the 
15 circumvention of the present invention via: (1) 
intercepting a reply datagram 3 (from the licensor) 
containing an approval (2) storing the reply datagram 
3; and (3) inputting the stored datagram to monitor 2. 
If the execution of step 105.2 does not transfer 
20 its procedural control to step 105.3, and if 
authorization control 27 is not zero (indicating an 
unqpialif led authorization has not been received) , st p 
105.3 processes authorization code 27 via st ps 
105.3.1 to 105.3.3. step 105.3.1 retrieves messag 
25 text 28 from datagram 3. If message text 28 is null, 
then the current datagrem 3 is ignored, and monitor 2 
resends the last transmitted datagram 3. Step 105.3.1 
further protects the present system from attempts to 
generate faJce datagrams and to feed the fake datagrams 
30 to monitor 2 by checking for a proper authorization 
code of zero. 

If message text 28 is not null, step 105.3.2 
presents the message 28 to the user on an output 
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devic such as a CRT scr n. Step 105.3.3 terminates 
th current us of product !• This st p may be 
implemented by subroutine or function call to a simpl 
exit that saves any current user data to a f il . 
S Alternatively, product 1 may be designed so that^ upon 
being directed to terminate further execution, it 
first gives the user an opportunity to save th ir 
data. 

If authorization code 27 is zero, step 105.4 

10 allows further use of product 1. Step 105.5 rettirns 
procedural control to 106.0 on FIGURE 3. 

FIGURE 7 shows a sequence of operations within 
the "Generate Authorization Code" procedure. Th 
procedure produces appropriate authorization code 27 

15 when a request datagram 3 is received at the 
licensor's site. 

Step 108.1 decrypts all encrypted data in the 
received datagram 3. Using source network address 21 
and product model number 24 in the datagram 3, st p 

20 108.2 seeurches the license database 29 for matching 
licensee network address 30 and product model number 
31. If license database 29 does not contain a record 
of product mode 1 number 24 of the product 1 being 
licensed to the licensee, st:ep 108.3 sets 

25 authorization code 27 of its reply datagram 3 to 1 
(i.e., the sending node is not a registered address) 
and authorization is denied. 

Step 108.3 prevents copies of product 1 fr m 
being installed on multiple nodes independently f 

30 whether they are within or outside the licensee's 
organization. Step 108.3 also prevents the licensee 
from transporting product 1 from one node to another 
node without the licensor's approval. This is 
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in^rtant because th two nodes juay have different 
processing capacities, and they may be billable at 
different rates. 

If the date a request datagx-am is received is 
later than license termination date 32, step 108.4 
sets authorization code 27 to number 2 (i. e., licens 
has expired). step 108.4 allows the licensor to fix 
licensing periods, or to determine free trial p riods 
for the use of the product. The licensing period may 
be extended by resetting license termination dat 32 
at the licensor's site. 

If the date when the datagram is received is 
later than the paid through date 33 as extended by th 
grace period 34, step 108.5 sets authorization code 27 
to 3 (i.e., payment is past due). 

If the number of processes running 26 exceeds a 
licensed number of concurrent uses of product 1. (at a 
particular node), then step 108.6 sets authorizati n 
code 27 to 4 (i.e. concurrent process usage limit is 
exceeded) . 

Step 108.7 sets authorization code 27 to 0 
indicating processing can continue. It is noted that 
steps 108.3«108.7 are a part of a 
IF (XI) then Cyl) 
ELSE if (x2) then (y2) 
ELSE if (x3) then (y3) ... 
statement of a procedure (e. g., FORTRAN, PASCAL, C, 
etc). Thus, only one of the steps 108.3-108.7 is 
executed. Step 108.7 sets authorization code 27 to 0 
(indicating approval of further use) only if steps 
108.3-108.6 do not execute the THEN portion of ach 
step, step 108.7 also stores the received datagram 3 
in history of license datagrams 6. 
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Step 108.8 is th« last f authorization 
processing rul s 108. 1-108. 7 • After the ex cution of 
steps 108.3-108.7, step 108.8 returns procedural 
control to step 109.0 in FIGURE 3. 
5 FIGURE 8 illustrates the steps which license 

control system 4 follows to send reply datagreun 3 to 
the licensee. 

Step 109 • 1 encrypts authorization code 27 and 
writes the encrypted code into datagram 3. Next, step 

10 109.2 writes message text 28 corresponding to 
authorization code 27 into datagram 3. 

Step 109.2 may be replaced with the following 
method for relaying proper messages to a product user. 
Proper messages corresponding to each authorization 

15 code is stored in monitor 2 at each licensee's site. 
Dpon reception of a reply datagrsun 3, monitor 2 would 
locate within itself the proper message corresponding 
to the authorization code, and use the message for 
various purposes. This method would reduce the siz 

20 of reply datagrams 3. However, if the licensor wanted 
to implement new denial codes, each product would need 
to somehow incorporate the new message associated with 
the new denial code into itself. The list of 
messages, one of which may be written as message text 

25 28, are as follows: 



AUTHORIZATION 

CODE TEXT MESSAGE 

1 This product is not licensed t^o 

run at this location. Please 
30 contact the licensor to either 

license this product, or move am 
existing license of your 
organization to this location. 
Use of this product at this 
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location is discontinued until 
this pr blea is r solved. 

2 Your license on this product has 
expired. Please contact licensor 
in order to have your license 
extended. Use of this product is 
discontinued until this problem is 
resolved. 

3 Payment on this licensed product 
is over due and past your grac 
period. Please have your 
accounting depaurtment send paym nt 
in order to continue your licens . 
Use of this. product is 
discontinued until this problem is 
resolved. 

4 Your current use of this lie nsed 
product exceeds limits for th 
number of uses yoiar organization 
has licensed. Please try again 
later. 

5 A reply from licensor to numeroixs 
authorization reqpiests was never 
received. This product must be 
connected to a communications 
network in order to function. 

0 Authorization is OK. There is no 

message. 

Step 109.3 swaps source network address 21 and 
destination network address 22. Step 109.4 transmits 
datagram 3 back to monitor 2 . 

At step 109.5, a commtmications network delivers 
datagram 3 to monitor 2. Subsequently, procedural 
control returns to step 107.0 in FIGURE 3 to process 
the next datagram 3. 

Although only a few exemplary embodiments of this 
invention have been described in detail above, thos 
skilled in the art will readily appreciate that many 
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Bodifications are posslbl in the preferr d 
embodiiaents without materially departing from the 
novel teachings and advantages of this invention. For 
exEUople, product 1 was described as sometimes 
5 consisting of information as well as software iidiich 
controls the information. This approach provides th 
greatest flexibility, but it is also possible to 
include the software which controls the information in 
the networked machine at the licensee's site. In this 

10 case, product 1 is split, with part of it on media and 
paurt on the licensee's machine. By doing this, some 
space can be saved on the media containing product 1, 
but the capabilities of these products will be limited 
by the standard functions available on these machines. 

15 Also, the presently described embodiment includ s 

a product 1 which is at the licensee's site. This 
implies that product 1 is on some physical media such 
as diskette, tape, or CD. However, product I can be 
electronically delivered over communications lines to 

20 the licensee and therefore might exist in the memory 
of the licensee's machine, rather than any physical 
media. In the case of a product such as music, radio 
programs and the like, product 1 may even be broadcast 
to the licensee's site for playback; thus, the product 

25 1 would not even be "resident" in the licensee's 
machine. 

ThB presently described embodiment allows the 
licensee to access the licensed product concxirrent 
with the sending and receiving of datagram 3. In this 
30 way, the present invention does not inconvenience the 
legitimate licensee; however, for sensitive licensed 
products such as confidential information, the license 
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ch ck monitor 2 can prevent acc ss to the product 1 
until an authorization reply datagram 3 is received. 

Further, monitor 2 could be realized as an 
integral pazrt of product 1, Monitor 2 could also be 
implemented as: 1) a separate process which is the 
parent process of product 1 (Such a parent pr c ss 
would have the authority to cancel the use of product 
1) ; 2} a single system level task which controls 
license checking of all products at the license 's 
site; and 3) custom logic in a digital integrat d 
circuit (the present invention could be implem nted 
as hardwcure instead of software) • 

Also, though the above embodiment has been 
described as being implemented on a computer system 
network where operator messages are provided on a CRT 
monitor or the like, the invention may be practic d 
on other hardware platforms by incorporating 
appropriate changes known to those of ordinary skill 
in the art. For example, in an alternative hardwar 
embodiment such as a music or video playback devic , 
monitor 2 is invoked by the licensee's acti n of 
pushing the "play** or similar button , and in a 
broadcast music application or similar system, th 
monitor may be invoked singly by turning the d vie 
on. The processing of monitor 2 is as described in 
the presently described embodiment. However, %d&en a 
denial message is received or generated, monitor 2 
must be able to switch "play" to "off". 

The presently described embodiment is design d 
to be used in conjunction with a connectionless UDP 
(User Datagram Protocol) in the TCP/IP protocol suite 
as an underlying protocol. However, the pres nt 
invention could also be realized using a slower. 
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conneotionless pr tocol such as el ctronlc mail or a 
vari ty f conn ctl n protoc Is ( , g., Fil Transfer 
Protocols (FTP) , Telnet) . 

It is noted that protocol suites quite different 
5 from TCP/IP could be used, such as ISO (International 
Standards Or9£mization) protocol. In addition, 
datagrams 3 could be sent over telephone systems with 
communications protocols such as those specified by 
CCITT (Consultative Committee on International 
10 Telephony and Telegraphy) • In this case, telephone 
numbers could serve as network addresses 21, 22. 
Communications protocols for wireless communications 
such as cellular telephone can also be used to send 
the datagram 3. 
15 Accordingly, all such modifications ar 

intended to be included within the scope of this 
invention as defined by the following claims. 
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WHAT IS CTAIMED TS* 

1. A aethod for monitoring the use of a 
licensed product, comprising the steps of: 

generating, at regular time intervals, 
datagrams including an address in a commimications 
facility, said facility address identifying a 
licensee; 

automatically sending said datagrams from 
at least one licensee's site over said facility to a 
licensor's site while said licensed product is in use; 

receiving said datagrams at said licensor's 

site; 

storing an indication of receipt of each f 
said datagrams; and 

counting said datagrams from each licensee 
as an indication of the use by the licensee of said 
licensed product. 

2* A method as in claim 1 further vherein: 

said generating step includes the step f 
20 incorporating a model number of said product in said 
datagrams; and- 

said counting step includes the step of 
separately counting datagrams for each product model 
number for each licensee. 

25 3. A method as in claim 1, vherein said 

generating step includes the step of automatically 
obtaining said facility address that identifies said 
licensee from said facility without any data being 
provided by said licensee. 



10 



15 



V 
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4. A metiiod for con^trolling use of a licensed 
product comprising t:lie steps of: 

generating a request datagrcua including an 
address in a communications facility, said facility 
5 address identifying a licensee; 

automatically sending said rec[uest datagram 
from at least one licensee's site over said facility 
to a licensor's site while said licensed product is in 
use; 

10 receiving said request datagram at said 

licensor's site; 

comparing said received recpiest datagram 
with rules and license data at said licensor's site to 
determine if use of said licensed product is 
15 authorized; 

sending a reply authorizing datagram to said 
licensee's site if use of said licensed product is 
approved; and 

receiving said reply authorizing datagram at 
20 said licensee's site emd denying the use of said 
product when no reply authorizing datagram is 
received. 



5. A method as in claim 4, wherein: 

said generating step Includes the step of 
25 Incorporating a model number of said product in said 
datagram; 

said comparing step includes the step of 
comparing said miles and license data for a particular 
model number; cind 
30 said sending step Includes the step of 

trcmsHiittlng said reply datagram for each product 
mod 1 number. 
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6. A method as in claim 4, wherein said 
generating step includes the step of automatically 
obtaining said facility address that identifies said 
licensee from said facility without any data being 

5 provided by said licensee. 

7. A method as in claim 4 further comprising 
the step of sending a reply denial datagram if use of 
said licensed product is not approved as determined in 
said compearing st^ep, said step of automatically 

10 sending said request datagram from a licensee's site 
including the step of resending said recpiest datagram 
if neither a reply authorizing datagram nor a reply 
denial datagram is received from said licensor's site 
within a predetermined time from sending said request 

15 datagram from said licensee's site. 

8. A method as in claim 4, wherein said step of 
automatically sending said request datagram from said 
licensee's site includes the step of sending a request 
datagrcun at regular time intervals. 

20 9. A method as in claim 4, wherein: 

said generating step includes the step of 
providing a datagram identification code within said 
datagram; 

said reply datagram sending step includes 
25 the step of inserting the same datagram identification 
code in said reply datagram; and 

said reply receiving step rejects said reply 
authorizing datagram if the datagram identification 
code included in said reply authorizing datagram does 
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not match the datagram identif icati n code included in 
said ^request datagram. 

lO. A method as in claim 4, wherein: 

said comparing step Includes the step of 
5 comparing said facility^ address that identifies said 
licensee with a list of valid licensee addresses to 
determine if said facility address is a veaid address; 
and 

said reply authorizing datagram is not sent 
10 if said facility address that identifies said licensee 
is not valid. 

11. A method as in claim 10 further comprising 
the step of sending a reply denial datagram if said 
facility address that identifies said licensee is not 

15 valid. 

12. A method as in claim 4, wherein: 

said comparing step includes the step of 
comparing a license expiration date with a date at 
which said datagram is received; and 
20 said reply authorizing datagram is not sent 

if the license expiration date is later than the date 
at which said datagram is received. 

13. A method as in claim 12, further comprising 
the step of sending a reply denial datagram if the 

25 license eacpiration date is later than the date at 
which said datagrcun is received. 

14. A method as in claim 4, wherein: 
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said comparing .st p includ s th step of 
ch eking curren^ness of payn nts fr m said licens ; 
and 

said reply authorizing datagram is not sent 
5 if payment is overdue. 

15. A me^od as in claim 14, further comprising 
the step of sending a reply denial datagram if payment 
is overdue. 

16. A method as in claim 4, wherein; 

10 said generating step includes the step of 

incorporating in said datagram data indicative of th 
number of processes currently using said product at 
said licensee's site; 

said comparing step includes the step of 

15 comparing the number of processes using said product 
at the licensee's site to an authorized niimber; and 

said reply authorizing datagram is not s nt 
if said nimber of processes using said product exceeds 
said authorized number. 

20 17. A method as in claim 16, further comprising 

the step of sending a reply denial datagram if said 
number of processes using said product exceeds said 
authorized number. 

18. A method as in claim 4, wherein said sending 
25 step includes the steps of sending said reply 
authorizing' datagram when use of said product is 
approved and sending a reply denial datagram when us 
of said product is not approved, said receiving st p 
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denying us of said product vh n said reply denial 
datagram is receiv d. 

19. A method as in claim 18, vherein said 
receiving and denying step denies use of said product 

5 when neither a reply authorizing datagram nor a reply 
denial datagram is received within a predetermined 
time after said request datagram is sent. 

20. A met:hod as in claim 18, further comprising 
the step of indicating, at a licensee's site, a reason 

10 for denial when said reply denial datagram is 
received. 

21. A method as in claim 4, wherein: 

said licensed product comprises an executable 
portion and a data portion; and 
15 said method further comprises a step of 

controlling use of said data portion with said 
executable portion. 

22. A method as in claim 4 further comprising a 
step of allowing use of said licensed product before 

20 a reply datagram is received. 

23. A system for controlling licensed product 
comprising: 

a commiinications facility to which at least 
one licensee having a license for operating a licensed 
25 product from 'the licensor is connected; 

monitoring means, connected to said facility 
at a site of each said licensee, for generating a 
request datagram including an address of said licens e 
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n said facility and * transaitting said requ st 
datagram ver said facility t a site of said 
licensor, and for receiving and processing a r ply 
datagraa; and 

5 controlling means, connected to said 

facility at said licensor's site, for receiving said 
request datagraa, conqparing said request datagram with 
rules and license data to determine if use of said 
licensed product is authorized and sending a reply 
10 authorizing datagram to said licensee's site if us of 
said product is approved; and 

said monitoring means including means for 
denying use of said licensed product when no reply 
authorizing datagram is received. 

15 24. A system as in claim 23, %merein: 

said monitoring means sends request 
datagrams at regular time intervals during use of said 
licensed product; and 

said controlling means further comprises 
20 means for counting said recpiest datagrsuns received at 
said controlling means and means for computing an 
amount to be billed to said licensee in respons to 
said counting. 

25. A system as in claim 23 vherein: 
25 said monitoring means incorporates a model 

number for said product in said request datagram; and 

said controlling means comprises means for 

counting datagrams for each product model number for 

each licensee, in order to compute an sunount t be 
30 billed to each licensee. 
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26. A systea as in clain 23, wherein said 
m nit ring m ans automatically obtains said facility 
address of said licensee from said facility without 
any input from said licensee. 

5 27. A system as in claim 23, wherein: 

said controlling means sends a reply denial 
datagram to said licensee's site if use of said 
product is not approved; and 

said monitoring means resends said request 
10 datagram if no reply authorizing datagram and no reply 
denial datagram is received within a predetermin d 
period of time after said requesting datagram is sent. 

28. A system as in clain 22, wherein said 
monitoring means transmits request datagrams at 

15 predetermined time intervals. 

29. A system as in claim 23, wherein: 

said monitoring means incojrporates a uniqu 
identification code in said request datagram; 

said controlling means incorporates the same 
20 request datagram identification code in said reply 
authorizing datagram; and 

said monitoring means rejects any reply 
axzthorizing datagram which does not include the same 
identification code as included in said request 
25 datagram. 

30. A system as in claim 23, wherein said 
controlling means compares said facility address f 
said licensee with a list of valid licensee facility 
addresses and does not generate a reply authorizing 
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datagraa if said facility- addr ss of said li'C ns is 
n t valid. . 

31* A system as in claim 30, vherein said 
controlling means sends a reply denial datagram vh n 
5 said facility address is not valid* 

32. A system as in claim 23, vherein said 
controlling means compares an expiration date of a 
license of said product vith a date at which said 
request datagram is received by said controlling 

10 means, and does not generate a reply authorizing 
datagram, thus denying use of said product, if th 
license expiration date is eeurlier than the dat at 
which said recjuest datagram is received. 

33. A system as in claim 32, wherein said 
15 controlling means sends a reply denial datagram if th 

license expiration date is eeurlier than the dat at 
which said request datagram is received. 

34. A system as in claim 23, wherein said 
controlling means generates a reply authorizing 

20 datagram, thus denying use of said product, if a 
payment for the use of said product is overdue. 

35. A system as in claim 34^ wherein said 
controlling means sends a reply denial datagram if 
payment for the use of said product is overdue. 

25 36. A system as in claim 23, wherein: 

said monitoring means includes in said 
request datagram data indicative of the number of 
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processes, at a licens 's sit , currently using said 
product; and 

said controlling means does not generat a 
reply authorizing datagram, thus denying a use of said 
product, if more than a predetermined number f 
processes using said product are running at the 
licensee's site* 

37. A system as in claim 36, wherein said 
controlling meems sends a reply denial datagram if 
more than said predetermined number of processes using 
said product aore running at the licensee's site« 

38. A system as in claim 23, wherein said 
controlling means sends a reply denial datagram if us 
of said product is not approved. 

39. A system as in claim 38, wherein said 
monitoring means denies use of said licensed product 
when no reply authorizing datagram and no reply denial 
datagram is received within a predetermined time from 
the sending of said request datagram. 

40. A system as in claim 38, further comprising 
means for indicating, at a licensee's site, a reas n 
for denial when said reply denial datagram is 
received. 

41. A system as in claim 23, vhereins 

said licensed product comprises an executabl 
portion and a data portion; and 
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said system further c mprises aeans for 
controlling us of said data porti n vith said 
executable portion* 

42* A system as in claim 41, wherein said data 
5 portion controlling means is disposed vithin said 
executable portion. 

43. A system as in claim 41, wherein said data 
portion controlling means comprises a first partial 
controlling means disposed within said executabl 

10 portion and a second partial controlling m ans 
disposed within said monitoring means. 

44. A system as in claim 23, wherein said 
monitoring means includes means for permitting use of 
said licensed product before a reply datagram is 

15 received* 

45. A system for monitoring product comprising: 
a communications facility to which at least 

one licensee having a license for operating a lie nsed 
product from a licensor is connected; 

20 monitoring means, connected to said facility 

at a site of each said licensee, for generating 
datagreuDS including an address of said license on 
said facility and transmitting said datagrams at 
periodic intervals over said facility to a sit f 

25 said licensor; and 

control means, connected to said facility at 
said licensor's site, for receiving said request 
datagrams, storing an indication of receipt of each of 
said datagrams and counting said datagrams from ach 
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license as an indicati n of ^he us by th licensee 
of said lie ns d product. 

46. A system as In clain 45, wherein said 
monitoring means automatically obtains said facility 

5 address of said licensee from said facility without 
any input from said licensee. 

47. A system as in claim 45, wherein: 

said monitoring means incorporates a product 
model number in said request datagrauns; and 
10 said controlling means separately counts 

reqpiest datagrams for each product model number for 
each licensee. 

48. A method for monitoring the use of a 
licensed product comprising the steps of: 

generating, at regular time intervals, 
datagrams including an address in a communications 
facility, said facility address identifying a 
licensee; and 

automatically sending said datagrams from at 
least one licensee's site over said communications 
facility to a licensor's site while said licensed 
product is in use. 

49. A method as in claim 48 further wherein: 
said generating step includes the step f 

incorporating a model number of said product in said 
datagrams. 



15 



20 



25 



50. A method as in claim 48, wherein said 
generating step includes the step of automatically 
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btaining said facility address that id xitifies said 
licens e from said c amunicati ns facility without any 
data being provided by said licensee. 

51. A method for controlling use of a licens d 
product comprising the steps of: 

generating a request datagram including a 
facility address that identifies a licensee in a 
commxuiications facility; 

automatically sending said request datagram 
from a licensee's site over said communications 
facility to a licensor's site while said licensed 
product is in use; and 

receiving a reply authorizing datagram at 
said licensee's site and denying the use of said 
product when no reply authorizing datagram is 
received. 

52. A method as in claim 51 wherein: 

said generating step includes the step of 
incorporating a model number of said product in said 
datagram* 

53* A method as in claim 51, wherein said 
generating step includes the step of automatically 
obtaining said facility address that identifies said 
licensee from said communications facility without any 
data being provided by said licensee. 

54. A method as in claim 51, wherein: 

said reply datagram is one of at least a reply 

authorization datagram and a reply denial datagram; 

and 
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said step of automatically e nding said r qu st 
datagram from a license sit includ s a step f 
resending said request datagram if neither a reply 
authorizing datagram nor a reply denial datagram is 
5 received within a predetermined time from sending said 
request datagram from said licensee's site. 

55. A method eis in claim 51, irtiereln said st p 
of automatically sending said request datagram from 
said licensee's site includes the step of sending a 

10 request datagram at reguleo: time intervals. 

56. A method as in claim 51, wherein: 

said generating step includes the step of 
providing a datagram identification code within said 
datagram; and 

15 said reply receiving step rejects said reply 

authorizing datagram if the datagram identification 
code included in said reply authorizing datagram does 
not match the datagram identification code Included in 
said request datagram. 

20 57. A method as in claim 51, wherein: 

said generating step includes the step of 
incorporating in said datagram data indicative of the 
number of processes ciirrently using said product at 
said licensee's site. 

25 58. A method as in claim 51, further comprising 

the steps of: 

receiving a reply denial datagram; and 
displaying, at a licensee's site, a reason f r 

denial when said reply denial datagram is received. 
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59. A n thod as in clain 51, vh r in: 

said licensed product comprises an executabl 
portion and a data portion; and 

said method further comprises a step of 
controlling use of said data portion with said 
executable portion. 

60. A method as in claim 51 further comprising 
a step of allowing use of said licensed product befor 
a reply datagraua is received. 

61. A system for controlling a licensed product 
comprising: 

a communications facility to which at least 
one licensee is connected; 

monitoring means, connected to said 
communications facility at a site of each said 
licensee, for generating a request datagram including 
an address of said licensee on said communications 
facility and transmitting said request datagram over 
said communications facility, and for receiving and 
processing a reply authorizing datagram; and 

means for denying use of said product when n 
reply authorizing datagram is received. 

62. A system as in claim 61, wherein: 

said monitoring means sends request 
datagrams at regular time intervals dxiring use of said 
licensed product. 

63. A system as in claim 61 wherein: 
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said m nit ring m ans inc rporates a nod 1 
ntunber f r said product in said r quest datagram. 

64 . A system as in claim 61 , wherein said 
monitoring means automatically obtains said facility 

5 address of said licensee from said communications 
facility without any input from said licensee. 

65. A system as in claim 61, wherein: 

said monitoring means resends said request 
datagram if no reply authorizing datagram and no reply 
10 denial datagram is received within a predetermined 
period of time after said requesting datagram is sent. 

66. A system as in claim 61, wherein said 
monitoring means transmits request datagrams at 
predetermined time intervals. 

X5 67. A system as in claim 61, wherein: 

said monitoring means incorporates a unique 
identification code in said reqpiest datagram; and 

said monitoring means rejects any reply 
authorizing datagram which does not include the sam 
20 identification code as included in said request 
datagrsm. 

68. A system as in claim 61, wherein: 

said monitoring means includes in said 
request datagram data indicative of the number of 
25 processes, at a licensee "s site, currently using said 
product. 

69. A system as in claim 61, wherein: 
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said monitoring n ans d ni s us of said 
licens d product when no reply authorizing datagram 
and no reply denial datagram is received within a 
predetermined time from the sending of said request 
5 datagraa. 

70. A system as in claim 61, further comprising 
means for indicating, at a licensee's site, a r as n 
for denial when a reply denial datagram is received. 

71. A system as in claim 61, wherein: 

10 said licensed product comprises an executable 

portion and a data portion; and 

said system further comprises means f r 
controlling use of said data portion with said 
executable portion. 

15 72. A system as in claim 71, wherein said data 

portion controlling means is disposed within said 
executable portion. 

73. A system as in claim 71, wherein said data 
portion controlling means coB^rises a first partial 

20 controlling means disposed within said executabl 
portion and a second partial controlling m ans 
disposed within said monitoring means. 

74. A system as in claim 61, wherein said 
monitoring means includes means for permitting use f 

25 said licensed product before a reply datagram is 
received. 
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75. A system f r Bonitoring a licensed product 
c mprlsing: 

a communications facility to which at least 
one licensee is connected; 

monitoring means , connected to said 
commiinications facility at a site of each said 
licensee, for generating datagrams including an 
address of said licensee on said commuiiications 
facility and transmitting said datagrams at periodic 
intervals over said communications facility* 

76* A system as in claim 75, wherein said 
monitoring means automatically obtains said 
communications facility address of said licensee from 
said communications facility without any input from 
said licensee. 

77. A system as in claim 75, wherein: 

said monitoring means incorporates a product 
model number in said request datagrams. 

78 • A method for monitoring the use of a 
licensed product comprising the steps of: 

receiving datagrams at a licensor's site on 
a communications facility having at least one 
licensee's site thereon, said datagrams being 
generated at regular time intervals and including a 
facility address that identifies a licensee in said 
communications f ac i 1 ity ; 

storing an indication of receipt of each of 
said datagrams; and 

counting said datagrams as an indication of 
the use of said licensed product. 
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79. A n thod as in claia 78 further wherein: 
said datagrams include a model number £ 

each product; and 

said counting step includes the step f 
separately cotxnting datagrams for each product model 
number for each licensee. 

80. A method for controlling use of a licens d 
product comprising the steps of: 

receiving a request datagram at a licensor's 
site on a communications facility having at least on 
licensee's site thereon, said request datagram 
including a facility address identifying a licens 
and being automatically sent over said communicati ns 
facility to said licensor's site while said licens d 
product is in use; 

comparing said received reqpiest datagram 
with rules and license data at said licensor's site to 
determine if use of said licensed product is 
authorized; and 

sending a reply authorizing datagram if use 
of said licensed product is approved. 

81. A method as in claim 80 wherein: 

said datagrams include a model number of 

said product; 

said comparing step includes the step of 

comparing said rules and license data for a particular 

model ntunber; and 

said sending step includes the step of 

transmitting said reply datagram for each product 

model number. 
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82* A Dethod as in claim 80 further comprising 
the step of sending a reply denial datagram if use of 
said licensed product is not approved as determin d 
in said comparing step* 

83* A method as in cladLm 80, wherein: 

said datagrams include a datagram 
identification code; and 

said reply datagreua sending step includ s 
the step of inserting the same datagram identification 
code in said reply datagram. 

84. A method as in claim 80, wherein: 

said compeuring step includes the step of 
comparing said facility address that identifies said 
licensee with a list of valid licensee addresses t 
determine if said facility address is a valid address; 
and 

said reply authorizing datagram is not sent 
if said facility address that identifies said licens 
is not valid. 

85. A method as in claim 84 further comprising 
the step of sending a reply denial datagram if said 
facility address that identifies said licensee is not 
valid. 

86. A method as in claim 80, wherein: 

said comparing step includes the step of 
comparing a license expiration date with a date at 
which said datagrcun is received; and 
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said r ply authorizing datagreun is n t sent 
if the license expiration date is later than the dat 
at which said datagram is received* 

87. A method as in claim 86, further comprising 
5 the step of sending a reply denial datagrsun if the 

license expiration date is later than the date at 
which said datagram is received. 

88. A method as in claim 80, wherein: 

said comparing step includes the step of 
10 checking currentness of payments from said license; 
and 

said reply authorizing datagram is not sent 
if payment is overdue. 

89. A method as in claim 88, further comprising 
15 the step of sending a reply denial datagram if paym nt 

is overdue • 

90. A method as in claim 80, wherein: 

said datagrams include data indicative of 
the nxuttber of processes cturrently using said product 
20 at said licensee's site; 

said comparing step includes the step of 
comparing a number of processes using said product to 
an authorized number; and 

said reply authorizing datagram is not sent 
25 if said number of processes using said product exceedis 
said authorized number* 

91* A method as in claim 90, further comprising, 
the step of s nding a reply denial datagram if said 
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number f processes using said product exceeds said 
auth rized number « 

92. A method as in claim 80, wherein said 
sending step includes the steps of sending said reply 

5 authorizing datagram when use of said product is 
approved and sending a reply denial datagram when use 
of said product is not approved. 

93. A system for controlling a licensed product 
comprising: 

10 a communications facility to which at 1 ast 

one licensee and a licensor are connected at a 
licensee's site and at a licensor's sit , 
respectively; and 

controlling means, coxuiected to said 

15 communications facility at said licensor's site, f r: 
receiving a request datagreun, said recjuest datagram 
including an address of said licensee on said 
communications facility and being transmitted over 
said communications facility to a site of said 

20 licensor; comparing said request datagram with rules 
and license data to determine if use of said licens d 
product is authorized; and sending a reply authorizing 
datagram to said licensee's site if use of said 
product is approved. 

25 94. A system as in claim 93, wherein: 

said request datagrams are sent at regular 
time intervals during use of said licensed product; 
and 

said controlling means comprises means f r 
30 counting said request datagrams received at said 
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c ntrolling neans and m ans for computing an an unt to 
be billed, to said lie ns in response to said 
counting* 

95. A system as in claim 93 wherein: 

said datagrams include a model nxxmber for 
said product; and 

said controlling means comprises means for 
counting datagrams for each product model nximber f r 
each licensee, in order to compute an amoxint t be 
billed to each licensee. 

96. A system as in claim 93, wherein: 

said controlling means sends a reply denial 
datagram to said licensee's site if use of said' 
product is not approved* 

97* A system as in claim 93, wherein: 

said datagrams include a unique 

identification code; and 

said controlling means incorporates the sam 

request datagram identification code in said reply 

authorizing datagraun* 

98* A system as in claim 93, wherein said 
controlling means compares said facility address of 
said licensee with a list of valid licensee facility 
addresses and does not generate a reply authorizing 
datagram if said facility address of said license is 
not valid* 
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99. A system as in claim 98, wh r in said 
controlling means s nds a reply denial datagram when 
said facility address is not valid. 

100. A system as in claim 93, wherein said 
5 controlling means compares an expiration date of a 

license of said product with a date at which said 
request datagram is received by said controlling 
means, and does not generate a reply authorizing 
datagram, thus denying use of said product, if the 
10 license expiration date is earlier than the date at 
%diich said request datagram is received. 

101. A system as in claim 100 , wherein said 
controlling means sends a reply denial datagram if th 
license expiration date is earlier than the date at 

15 which said request datagram is received. 

102. A system as in claim 93, wherein said 
controlling means generate a reply authorizing 
datagram, thus denying use of said product, if a 
payment for the use of said product is overdue. 

20 103. A system as in claim 102, wherein said 

controlling means sends a reply denial datagram if 
payment for the use of said product is overdue. 

104. A system as in claim 93, wherein: 

said datagreuas include data indicative of 
25 the number of processes, at a licensee's sit , 
currently using said product; and 

said controlling means does not generat a 
reply authorizing datagram, thus denying a use of said 
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product. If m re than* a pr d termined ntunber of 
processes using, said produ t ar rxinning at th 
licensee's site. 

105. A system as in claim 104, wherein said 
5 controlling means sends a reply denial datagram if 

more than said predetermined number of processes using 
said product are running at the licensee's site. 

106. A system as in claim 93, wherein said 
controlling means sends a reply denial datagram if us 

10 of said product is not approved. 

107. A system as in claim 93, wherein: 

said licensed product comprises an executable 
portion and a data portion; and 

said system further comprises meams f r 
15 controlling use of said data portion with said 
executable portion. 

108. A system as in claim 107, wherein said data 
portion controlling means is disposed within said 
executable portion. 

20 109. A system for monitoring a licensed product 

comprising: 

a communications facility to which at least 
one licensee and a licensor are connected at a 
licensee's site and at a licensor's site, 
25 respectively; and 

control means, connected to said 
communications facility at a licensor's site, for: 
receiving request datagrstms, said request datagrams 
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including an address f said licens on said 
comaunicati ns facility and being tramsmitted at 
periodic intervals over said cosmiinications facility 
to said licensor's site; storing an indication of 
5 receipt of each of said datagrams; and counting said 
datagraxQS from each licensee as an indication of the 
use by ^e licensee of said licensed product. 

110. A system as in claim 110, wherein: 

said request datagrams include a product 
10 model number; and 

said controlling means separately counts 
request datagrams for each product model number for 
each licensee. 
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